Suprema BioStation 3 combines fingerprint and face recognition in a compact IP access controller that is increasingly specified in corporate and high-security environments. Integrating BioStation 3 with a KNX building automation system enables access events to feed into the BAS logic — triggering lighting scenes on first entry, activating energy-saving modes when the last person leaves, and feeding alarm states into the KNX security zone. This guide covers the BioStation 3 hardware interface, BioStar 2 server API, relay-to-KNX wiring, and lockdown scenario configuration.

BioStation 3 hardware and BioStar 2 server

The Suprema BioStation 3 connects to the IP network via a PoE LAN port. It manages up to 2 doors (with relay board) and supports Wiegand input for downstream card readers. The door relay output is a dry contact relay (NO/NC) rated 2A at 30V DC — typically wired to an electric door strike or electromagnetic lock. For KNX integration via hardware: the BioStation 3 relay output wires to a KNX binary input module (e.g., MDT SCN-8V.01, Gira 1-gang input). When the BioStation 3 grants access, the relay closes → KNX binary input detects edge → sends DPT 1.001 telegram to GA 11/0/0 ("Door Open"). The BioStar 2 server (Windows or Linux, TCP 443 REST API) manages all BioStation 3 devices centrally, stores access logs, and provides a REST API for event-driven integration. API authentication: BioStar 2 REST API uses session token (login POST to /api/login with admin credentials → returns session cookie). Event webhook: BioStar 2 supports event push webhooks (configure in BioStar 2 Settings → Event Webhook → target URL → events: ACCESS_GRANTED, ACCESS_DENIED, DOOR_FORCED_OPEN, ALARM).

KNX group address scheme for access events

KNX GA assignments for access control: GA 11/0/0 — "Door Open" DPT 1.001 (hardware relay → KNX binary input). GA 11/0/1 — "Person Present in Zone" DPT 1.002 (occupancy state derived from access in/out tracking). GA 11/0/2 — "Access Denied Alarm" DPT 1.005 (triggered via BioStar 2 webhook → HA → KNX). GA 11/0/3 — "Door Forced Open" DPT 1.005 (BioStar 2 door sensor event). GA 11/1/0 — "Lockdown Active" DPT 1.001 (write 1 to trigger lockdown sequence). GA 11/1/1 — "CCTV PTZ Preset" DPT 18.001 (on access denied, move camera to door preset). The person-present occupancy (GA 11/0/1) logic: BioStar 2 webhook sends access-granted events to HA. HA tracks a counter (people in zone); when counter > 0 → GA 11/0/1 = 1; when counter = 0 (everyone has exited) → GA 11/0/1 = 0. KNX automation on GA 11/0/1 = 0: send "last person out" scene (DALI lights to standby, HVAC setback, security arm).

Lockdown scenario and CCTV integration

Lockdown trigger: KNX GA 11/1/0 receives value 1 (from fire panel KNX output, panic button, or security management system). HA automation: on GA 11/1/0 = 1 → POST to BioStar 2 API '/api/door/lock_all' with session token → BioStar 2 sends lock command to all BioStation 3 doors simultaneously (relay locks, no granted access possible). Simultaneously: GA 11/1/1 receives scene value to move all IP PTZ cameras to monitoring presets. Fire alarm integration (opposite logic): KNX fire alarm input GA 12/9/0 = 1 → HA posts to BioStar 2 API '/api/door/open_all' → all door strikes release (fail-safe unlock for evacuation). DALI emergency lighting: separate DALI emergency driver triggers from KNX GA 12/9/0. Access denied CCTV: when BioStar 2 webhook fires ACCESS_DENIED event → HA sends KNX telegram to GA 11/1/1 with PTZ preset for the denied door camera.

Wiring description and commissioning

Hardware wiring: BioStation 3 relay COM and NO terminals → MDT SCN-8V.01 input terminals (channel 1). MDT SCN-8V.01 supplied with 12V DC bus power. Input sensitivity: MDT binary input detects contact closure within 30ms. ETS6 configuration for MDT SCN-8V.01: channel 1 type = contact input, telegram type = 1 bit, send on change, 0→1 and 1→0, debounce 20ms. Commissioning steps: (1) Present enrolled fingerprint at BioStation 3 → confirm relay clicks and KNX Group Monitor shows GA 11/0/0 = 1. (2) Simulate access denied (wrong finger 3 times) → confirm BioStar 2 webhook fires → HA log shows denied event → GA 11/0/2 = 1 in KNX Group Monitor. (3) Send GA 11/1/0 = 1 from ETS6 Group Monitor → confirm all doors lock within 3 seconds (test with manual door handle). (4) Send KNX fire alarm GA 12/9/0 = 1 → confirm all door strikes release within 2 seconds.